Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data Controller
- 4. Data We Collect
- 5. Data Processing & Legal Basis
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Data Security
- 10. Cookies & Tracking
- 11. International Transfers
- 12. Your Rights
- 13. Minors
- 14. Policy Amendments
- 15. Contact Us
Introduction
RC999 ("RC999", "we", "us", "our") is the operator of the online gaming platform accessible at rc999.cam (the "Platform"). This Privacy Policy ("Policy") describes how RC999 collects, uses, stores, discloses and safeguards personal information relating to individuals ("Users", "you", "your") who access or interact with the Platform.
RC999 is an English-language online gaming information platform targeting Pakistani users. The Platform serves users from across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We process personal data in compliance with the data protection and privacy obligations applicable to our operating jurisdiction and, where relevant, in a manner consistent with internationally recognised privacy principles.
This Policy applies to all personal data collected via the Platform, including through account registration, KYC verification, payment processes, customer support interactions, marketing communications (where consented to) and the use of cookies and similar tracking technologies.
This Policy should be read in conjunction with the RC999 Terms & Conditions, which govern the overall use of the Platform.
Definitions
In this Policy, the following terms carry the meanings set out below unless the context requires otherwise:
Data Controller
RC999 acts as the Data Controller for Personal Data collected through the Platform. As Data Controller, RC999 is responsible for determining why and how your data is processed, and for ensuring that such processing is conducted lawfully, fairly and transparently.
RC999 does not maintain a registered office in Pakistan. The Platform is operated from the jurisdiction of the applicable operator license. Enquiries relating to data protection matters may be directed to the support team using the contact details set out in Section 15 of this Policy.
Data We Collect
4.1 Data Provided Directly by You
RC999 collects the following categories of Personal Data that you provide directly when using the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC or passport number | Registration, KYC verification |
| Contact Data | Email address, phone number (where requested) | Registration, support interactions |
| Financial Data | Payment method details, transaction history, account balance | Deposits, withdrawals, KYC |
| Verification Data | ID document scans, selfie/liveness images, proof of address | KYC verification process |
| Communications Data | Support chat transcripts, email correspondence content | Customer support interactions |
| Responsible Gambling Data | Self-exclusion requests, deposit/loss/time limit settings | Player protection tool usage |
4.2 Data Collected Automatically
When you access the Platform, RC999 and its service providers may automatically collect the following technical and usage data:
- IP address and approximate geographic location derived therefrom;
- Device type, operating system and browser version;
- Session timestamps, page visit duration and navigation paths;
- Betting and gaming activity data, including wager amounts, game selections and bet outcomes;
- Cookie and tracking technology data, as further described in Section 10.
4.3 Data from Third Parties
RC999 may receive Personal Data about you from third-party sources in limited circumstances, including from KYC verification service providers that confirm your identity and age, and from fraud prevention and AML screening services. Data received from third parties is handled in accordance with this Policy and any applicable contractual obligations with those providers.
Data Processing & Legal Basis
RC999 processes Personal Data only where a lawful basis exists for doing so. The applicable legal bases under recognised data protection frameworks include:
How We Use Your Data
RC999 uses the Personal Data it collects for the following purposes:
- Account management: Creating, maintaining and administering your RC999 account, including verifying your identity and age through the KYC process;
- Service delivery: Processing deposits and withdrawals, settling bets, providing live casino and slot access, and managing bonus and promotional entitlements;
- Customer support: Responding to enquiries, resolving complaints and providing technical assistance through live chat and email channels;
- Responsible gambling: Monitoring account activity to detect problem gambling indicators, administering self-exclusion requests, and enforcing deposit, loss and time limits set by the User;
- Fraud prevention and AML compliance: Screening transactions, detecting suspicious activity and fulfilling anti-money-laundering obligations;
- Platform improvement: Analysing usage patterns, technical performance and user feedback to enhance the quality and security of the Platform;
- Legal compliance: Meeting regulatory, licensing and legal obligations in the applicable jurisdiction;
- Marketing communications: Sending promotional offers and platform updates to Users who have opted in — you may withdraw consent at any time by contacting support or using any unsubscribe mechanism provided.
Data Sharing & Disclosure
RC999 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate safeguards:
7.1 Service Providers (Data Processors)
RC999 engages third-party service providers who process Personal Data on our behalf, under written data processing agreements. These include KYC and identity verification providers, payment processing infrastructure partners, platform hosting and cloud storage providers, fraud detection and AML screening services, and customer support technology providers. These parties are contractually prohibited from using your data for their own purposes.
7.2 Payment Method References
RC999 references familiar Pakistan payment methods — including Easypaisa, JazzCash, Raast and bank transfers via institutions such as HBL, UBL, Meezan Bank and Bank Alfalah — as contextual examples of locally known payment infrastructure. When a transaction is processed through such a method, limited payment data may be exchanged with the relevant payment gateway. This exchange is necessary for transaction processing and is governed by the payment provider's own terms and privacy policy. RC999 does not represent that any of these providers endorse or are affiliated with online gambling.
7.3 Regulatory and Legal Disclosures
RC999 may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required by applicable law, a court order, or a lawful request from a competent authority. Where legally permissible, RC999 will endeavour to notify you of such a disclosure.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of RC999's business or assets, Personal Data may be transferred to a successor entity as part of that transaction. Users will be notified of any such transfer that materially affects how their data is processed, and the successor entity will be required to maintain equivalent data protection standards.
Data Retention
RC999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following general retention principles apply:
- Account and identity data is retained for the duration of the account relationship and for a minimum period thereafter as required by AML and licensing regulations, which typically mandate record retention for a defined period following account closure;
- Transaction and financial data is retained for the period required by applicable financial regulations and for the purpose of resolving disputes;
- KYC verification documents are retained in accordance with licensing requirements, which typically specify a minimum retention period following the completion of the verification process;
- Customer support communications are retained for a period sufficient to handle any follow-up complaints or regulatory enquiries relating to those interactions;
- Marketing data (for users who have consented to marketing) is retained until consent is withdrawn or the account is closed, whichever is earlier;
- Technical and analytics data is retained for the period necessary for platform security, fraud analysis and service improvement purposes.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.
Data Security
RC999 implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These include:
- SSL/TLS encryption for all data transmitted between your device and the Platform;
- Encryption of sensitive data at rest, including stored identity and financial records;
- Role-based access controls limiting internal access to Personal Data to authorised personnel only, on a strict need-to-know basis;
- Regular security assessments and vulnerability monitoring of Platform infrastructure;
- Secure KYC document upload portals using HTTPS protocols — users should never submit identity documents through unsecured channels such as unencrypted email or social media messaging.
While RC999 takes reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the event of a data security incident that poses a risk to your rights, RC999 will notify affected users and relevant authorities in accordance with applicable obligations.
Cookies & Tracking Technologies
RC999 uses cookies and similar tracking technologies (including pixel tags and local storage objects) on the Platform. These technologies help the Platform function correctly, remember your preferences, analyse usage and support security monitoring.
10.1 Cookie Categories
The following categories of cookies may be used on the Platform:
| Category | Purpose | Can be disabled? |
|---|---|---|
| Strictly Necessary | Required for core Platform functions, including session management, account authentication and security features. | No — these are essential for the Platform to operate. |
| Functional | Remembering user preferences such as language settings, display options and game lobby state. | Yes — disabling may affect certain personalisation features. |
| Analytics | Aggregated data on how users interact with the Platform, used to identify improvements and measure performance. No personally identifiable data is shared with analytics providers. | Yes — opt out via cookie preference controls. |
| Security | Detecting and preventing fraudulent access, bot activity and suspicious session behaviour. | No — necessary to maintain account and Platform security. |
You may manage your cookie preferences through your browser settings or through any cookie preference controls made available on the Platform. Please note that disabling certain cookies may affect the functionality and security of the Platform.
International Data Transfers
RC999 and its service providers operate globally. As a result, your Personal Data may be transferred to, and processed in, countries other than the country in which you are located — including countries that may not provide the same level of data protection as your home jurisdiction.
Where RC999 transfers Personal Data internationally, it takes steps to ensure that appropriate safeguards are in place to protect that data, including where applicable through contractual arrangements with service providers that impose equivalent data protection obligations.
By using the Platform, you acknowledge that your data may be transferred and processed internationally in the manner described in this Policy.
Your Rights
Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to your Personal Data held by RC999. To exercise any of these rights, please contact our support team using the details in Section 15.
Right of Access
You have the right to request a copy of the Personal Data RC999 holds about you, along with information about how it is being processed.
Right to Rectification
You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may also update certain details directly through your account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restriction
You may request that RC999 restricts the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Right to Data Portability
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request receipt of your data in a structured, commonly used format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. RC999 will cease such processing unless compelling legitimate grounds override your objection.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
If you are dissatisfied with how RC999 handles your data, you have the right to lodge a complaint with the competent data protection authority in the applicable jurisdiction.
Minors
The RC999 Platform is strictly for adults. Access is limited to individuals aged 18 years or above, or the higher minimum age required by the operator's license jurisdiction. RC999 does not knowingly collect Personal Data from minors. If RC999 becomes aware that Personal Data has been inadvertently collected from a person under the applicable minimum age, that data will be deleted promptly and the associated account will be closed.
If you are a parent or guardian and believe that your child may have submitted Personal Data to RC999, please contact our support team immediately using the details in Section 15 so that the matter can be investigated and resolved without delay.
Policy Amendments
RC999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — we will provide reasonable prior notice through the Platform, by email or through another appropriate communication channel.
For minor or non-material amendments, the updated Policy will be published on this page with a revised effective date, and your continued use of the Platform following publication will constitute acknowledgement of the updated Policy.
We encourage you to review this Policy periodically to remain informed about how RC999 protects your data.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy, the handling of your Personal Data or the exercise of your data rights, please contact the RC999 support team. We are committed to handling all privacy-related enquiries with appropriate diligence and within the response timeframes set out in this Policy.